Privacy

Stays in your browser. The TTS model runs locally — your scripts are never uploaded to a server, and we couldn't read them even if we wanted to. You can verify in the Network tab: there's no outbound request when you click Generate.

Generated locally. The downloaded WAV is yours; we never see it. If you choose to sign in, your last 20 generations sync across devices — and even then, only the parameters (text snippet preview, voice, speed) are stored, not the audio file.

We store, in our Cloudflare D1 database:

• Your Google account email and display name
• An OAuth session token (so you stay signed in)
• Survey answers if you complete the in-app questionnaire
• Approximate location (country, region, city) on survey submission only — derived from Cloudflare's request properties, not from your IP being stored
• If you bought the Founder's Deal, a record of that purchase (your Stripe customer ID, payment timestamp)

We do not store your IP address. We do not use Google for ads. We do not sell anything to anyone.

Payment is processed by Stripe. We never see your card number. Stripe stores the payment record under their privacy policy (stripe.com/privacy). We get back: a customer ID, the email used, and a confirmation that you paid.

We use only the cookies necessary to keep you signed in (a session cookie set by Auth.js). No analytics cookies on our domain. No tracking pixels.

If we ever add an analytics cookie, this page changes to describe it before the cookie is set.

You can:

• Delete your account at any time — /account has a delete button. We cascade-remove your sign-in record, synced history, and survey lifecycle. Past purchase rows are kept for accounting but anonymized (userId set to NULL).
• Email hello@kitten-tts.com with any data request. We'll respond within 7 days.
• Use the tool without signing in. Anonymous use stores nothing on our side; preferences and history live in your browser's localStorage / IndexedDB only.

Our database is Cloudflare D1, hosted in Cloudflare data centers. Cloudflare's data-protection terms cover residency.

We don't have a separate analytics warehouse. There is no third-party data broker.

If we change anything material, the date at the top updates and we send a brief note to signed-in users via email. We'll never quietly expand what we collect.